What a website care plan should include and what is padding

A website care plan should cover a short list of recurring jobs: software updates, backups, SSL renewal, uptime monitoring, security patches, small content edits, and keeping the domain and hosting renewed. Anything else on the quote deserves a question. The most important protection will not appear as a line item at all: the domain, hosting and logins should be in your name, so you can leave a provider and keep your site. If you run a dental office or a plumbing company, that is the whole decision. The rest of this post explains each piece.

What a care plan should include

Each of these jobs prevents a specific, boring failure. Ask the provider to describe how they do each one, rather than only confirming that they do.

• Software updates. If your site runs on a platform with plugins or themes, those need updating on a schedule, because outdated code is the most common way sites get broken into.
• Backups. A copy of the site stored somewhere other than the server it runs on, with a clear answer to how fast you can get it restored.
• SSL renewal. The certificate that puts the padlock in the browser has an expiry date, and someone has to make sure it renews.
• Uptime monitoring. An automatic check that alerts a real person when the site goes down, so you do not learn about it from a customer.
• Security patches. Fixes applied when a vulnerability is announced, not at the next quarterly visit.
• Small content edits. Changing hours, swapping a photo, adding a service. These should be quick and have a stated turnaround.

Domain and hosting renewals belong on that list too. Someone should own the calendar date, send you a reminder, and make sure the card on file works.

What is often padding

Some plans are built to look thick. The items below are not always worthless, but they should come with a plain explanation of what you receive.

• Monthly reports that list visitor charts nobody acts on, presented as a service.
• "Performance tuning" or "SEO optimization" with no description of what gets changed.
• Banked edit hours that expire at the end of the month, so you pay for time you cannot use.
• "Premium security" with no named tools and no explanation of what it blocks.
• Per-page or per-edit fees for changes as small as a phone number.

A useful test: if you cannot picture what a person actually does for an item, ask them to describe it in one sentence. A real task has a real answer. A padded one gets a vague one.

Questions to ask any provider

1. Whose name is on the domain registration, and whose email receives the renewal notices?
2. Whose account is the hosting under, and can I have administrator access today?
3. Where are backups stored, how often do they run, and how long does a restore take?
4. Who gets the alert when the site goes down, and how quickly does someone respond?
5. What counts as a small edit, and how long does one take?
6. If I cancel, what do I receive, and how fast? Will you hand over the files and transfer the domain?

The last question is the one that sorts providers fastest. A good answer is specific and comes without hesitation. A hedged answer tells you where the leverage sits.

How to check that you own your domain and hosting

You can verify this in an afternoon without asking permission.

1. Run your domain through a public domain lookup tool. It shows the registrar and, often, the registrant. Some registrars hide the registrant behind a privacy service, so an anonymous result is not proof of anything either way.
2. Ask the provider which registrar holds the domain, then try to log in with your own email. If you have never had an account there, the domain is probably registered under the provider's account.
3. Check your email for renewal notices addressed to you. If they all go to someone else, you are relying on that person to keep your business online.
4. Ask for a login to the hosting account itself. Being listed as a contact is different from holding the account.

If you find the domain sits in the provider's account, you can usually ask for a transfer. Do this while the relationship is friendly. It gets harder after a dispute.

What happens when renewals lapse

A lapsed renewal is rarely dramatic at first. The domain expires, the site stops loading, and email addressed to that domain stops arriving. Many registrars offer a grace period, but the length and cost of recovery vary, and after it ends the name can be released for anyone to register. A competitor, or a buyer who wants to resell it to you, can pick it up.

An expired SSL certificate behaves differently. The site still exists, but browsers show a full-page security warning, and most visitors leave. If hosting lapses, the provider may delete the files, which is why backups stored elsewhere matter.

All three come down to who gets the reminder and who pays the bill. When the accounts are yours, the reminder reaches you, and a missed card payment is a problem you can fix in minutes.

What NetWebMedia offers

NetWebMedia sells ready-made websites in 14 industry designs. It adds your logo, photos and services, connects your domain, and puts the site live in 72 hours, with domain, hosting and SSL included for year one. You pay only after you approve the finished site. The next step is on the page linked below.

← Back to all articles